Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/_HIjlGFi0lUcd1yNtLgBPqfcb98.roa
File: _HIjlGFi0lUcd1yNtLgBPqfcb98.roa (raw, json)
Hash identifier: 0BJ0/1OA0KyqAXmmuGdJeB6oD28DVVKatfzDpEla8KY=
Subject key identifier: FC:72:23:94:61:62:D2:55:1C:77:5C:8D:B4:B8:01:3E:A7:DC:6F:DF
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 04706818
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/_HIjlGFi0lUcd1yNtLgBPqfcb98.roa
Signing time: Sun 06 Mar 2022 06:19:26 +0000
ROA not before: Sun 06 Mar 2022 06:19:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210028
IP address blocks: 194.12.56.0/24 maxlen: 24
194.12.57.0/24 maxlen: 24
194.12.58.0/24 maxlen: 24
185.89.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74475544 (0x4706818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Mar 6 06:19:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc7223946162d2551c775c8db4b8013ea7dc6fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:be:d4:50:e5:5d:9f:bc:47:8c:66:1e:c3:
8f:b9:ee:3b:60:9d:b8:f1:b1:dd:76:53:a1:40:ff:
3d:75:d9:d6:e8:bb:25:fe:0f:b1:f5:23:73:a9:7a:
52:bf:9e:89:24:a7:b0:f7:8f:86:0e:c4:eb:5a:9a:
2a:69:42:d8:aa:86:76:3c:2c:4b:7a:71:ca:74:3a:
64:7c:2f:da:fe:d8:5e:7f:99:e3:fd:89:01:fe:d2:
e3:d1:3a:f3:5d:04:bb:98:e2:e1:ff:2e:37:a3:d7:
32:02:d9:f5:98:3d:90:0a:d5:2f:42:69:2b:94:5c:
69:9f:03:ff:65:a4:6e:36:af:1e:cd:3f:81:cf:ae:
dd:03:fa:73:e7:d7:2a:a3:f9:14:dd:ca:56:5c:91:
e5:ea:4f:1a:89:42:79:16:7e:cb:bf:e8:f3:5e:61:
68:95:5c:87:c8:d4:55:f3:48:c8:5a:44:8c:c4:8c:
f8:82:4d:32:9b:15:7c:38:41:2d:28:38:a7:6f:52:
42:20:6b:8c:a1:1d:7a:58:88:d7:4c:ed:25:96:76:
61:c8:59:0b:5a:5d:1a:3e:91:3b:1d:ad:39:77:5b:
5e:84:2a:88:ac:f3:f7:c4:4e:7e:c7:18:32:f7:b2:
20:52:81:22:81:89:c6:2f:c0:33:c6:67:42:81:af:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:23:94:61:62:D2:55:1C:77:5C:8D:B4:B8:01:3E:A7:DC:6F:DF
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/_HIjlGFi0lUcd1yNtLgBPqfcb98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.99.0/24
194.12.56.0-194.12.58.255
Signature Algorithm: sha256WithRSAEncryption
1c:16:4a:d2:56:94:b1:66:48:e3:74:e7:be:b6:0c:f5:a4:f4:
b4:eb:72:ca:77:a0:0f:da:56:0b:ef:fd:47:5f:18:5b:b5:4c:
ec:eb:d3:5b:3d:e4:19:23:ee:2e:7c:19:8e:96:17:4c:61:4d:
96:38:9b:7b:9e:a9:2d:72:6f:13:16:3a:b6:7d:3c:cf:2c:af:
b7:25:d1:f9:ca:99:19:de:54:6b:c2:79:78:93:37:64:af:f3:
3d:cd:97:c0:07:3a:96:11:27:1e:f6:48:16:e3:26:4a:ca:41:
e5:50:27:bc:b0:49:00:cd:d3:88:27:06:f0:b5:c1:46:d4:a1:
c5:8b:e8:90:be:6f:5f:cc:18:28:61:70:ed:a4:b4:2a:47:b0:
2e:05:33:47:45:d9:02:a8:7f:75:e0:81:16:b5:66:24:e9:fa:
c9:c2:26:a3:99:40:ce:01:3b:27:f1:4a:c3:86:8a:c0:d5:4a:
67:9e:69:1d:d1:c3:53:4f:72:4b:01:b7:2b:0b:ab:29:17:25:
40:a8:ec:76:08:ff:ce:c4:a2:18:60:8a:76:9d:d5:64:43:39:
5a:4e:55:72:41:01:1a:51:f5:56:f5:31:a3:0c:5b:5c:a3:96:
25:4e:1b:14:fa:e0:39:d3:24:43:d5:34:23:02:9f:b4:bb:46:
b3:16:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:11 2023 by rpki-client on console-fra.rpki-client.org